Mobile Device Protection
Create a complex passcode for your mobile device. Avoid using personal information (i.e., names and important dates) in your passcode. Do not share your mobile device passcode with anyone.
Enable available security features, such as an auto-wipe feature after excessive password failures or auto-lock after a specified time frame. Keep your mobile device’s software up-to-date. If your mobile device prompts you to install an operating system or firmware update, review the update and install it as soon as you can to address any identified security vulnerabilities in previous update(s).
Disable features not actively in use, such as Bluetooth, Wi-Fi, and infrared. Set Bluetooth-enabled devices to “non-discoverable” when Bluetooth is enabled.
Utilize antivirus software where applicable (i.e., Androids, Windows, etc.).
Do not root, jailbreak, or otherwise circumvent security controls on your device. Compromised security controls could result in the introduction of malware onto the device.
When finished with the device, lock it to require a passcode before the device can be used again.
Mobile Applications
Download and install mobileapplications only from trustedsources authorized by the device manufacturer,such as Apple’s App Store, Google Play, or theWindows Store.Enable mobile device features to block mobileapplication downloads from unknown sources.When available, require a passcode to downloadmobile applications to prevent unauthorizedinstallation.Protect yourself from fraudulent mobileapplications by watching for these signs:
Typos, poor image quality, or formatting issues.Low number of downloads.Negative user reviews.
Additionally, review other mobile applicationscreated by the app developer to validate theapplication’s legitimacy.If possible, create a passcode on any mobileapplication you install that may have access toyour personal information.When finished with a mobile application, always“Sign Out” or “Log Off” rather than just closing it.
Phishing
Phishing is when an attacker attempts to acquire information by masquerading as a trustworthy entity in an electronic communication. Phishing messages often direct the recipient to a spoof website. Phishing attacks are typically carried out through email, instant messaging, telephone calls, and text messages (SMS).
Prevention Tips:
Delete email and text messages that ask you to confirm or provide sensitive information. Legitimate companies don't ask for sensitive information through email or text messages.
Beware of visiting website addresses sent to you in an unsolicited message.
Even if you feel the message is legitimate, type web addresses into your browser or use bookmarks instead of clicking links contained in messages.
Try to independently verify any details given in the message directly with the company.
Utilize anti-phishing features available in your email client and/or web browser.
Utilize an email SPAM filtering solution to help prevent phishing emails from being delivered.
Report Fraudulent or Suspicious Activity
Contact us immediately if you suspect you have fallen victim to a social engineering attack and have disclosed information concerning your Johnson City Bank accounts.
Call us at 1-830-868-7131 or visit your local Johnson City Bank branch location.
Regularly monitoring your account activity is a good way to detect fraudulent activity. If you notice unauthorized transactions under your account, notify Johnson City Bank immediately.
Additional Resources
To learn more about information security visit any of the following websites: